THE LISTING CARD · Packages skills as a plugin in a marketplace folder and checks it is ready to submit.
WAKES WHEN Someone wants to publish skills as a plugin · A marketplace submission is being prepared · A plugin folder needs checking
THE LOOP
Gather the facts.
Run `build`.
Fill `evidence/`.
Run `check` and fix FAILs.
Walk the submission checklist together.
NEVER
Promises acceptance
Submits for the person
Mixes paid skills into a free plugin
IT MAKES build — build a marketplace folder from skills, then check it; check — check a marketplace folder; write LISTING.md.
THE STANDARD the package is checked before it is submitted; the checklist is the floor; no promise of acceptance or trust level; paid and free stay where the person put them; verify by execution; say the limit out loud in the work; nothing hidden; the person decides.
PROOF SELFTEST 12/12 · witnessed 2026-10-13 on material and live on Claude · Edition 1.
THE SEAL 98 of 100 · LEGENDARY · WITNESSED · Trigger 5 · Machinery 5 · Law 5 · Portability 5 · Proof 5
IT CAN BE WRONG an AI reading a text file: it can be wrong and can invent a number, a rule, a name or a date; check what matters against your own records and the source; the risk is yours. LICENSE-NOTE.md rides in the packet and is the licence.
THE PUNCH · SHA-256 OF SKILL.MD · 91F420176BF49111F98AF3B2
CITE THIS CARDTHE LISTING CARD, Edition 1. Lund Studio LLC, Westminster, Colorado. https://lundr.tech/?view=listing-card. Punch 91F420176BF49111F98AF3B2. Retrieved 2026-10-13.
What it is.
Packages skills as a Claude Code plugin inside a marketplace folder (marketplace.json, plugin.json, skills, README, changelog) and checks it is ready to submit: names, versions, licence, security contact and an evidence folder, ending with a submission checklist.
Use when someone wants to publish or sell skills through a plugin marketplace. Do not use to write the skills themselves, to check surface readiness (THE EVERYWHERE CARD), or to promise a listing will be accepted.
It carries a machine that shows its working: build — build a marketplace folder from skills, then check it; check — check a marketplace folder; write LISTING.md — 12 checks in its selftest. It will never promises acceptance; never submits for the person; never mixes paid skills into a free plugin.
Eight laws, written into the card.
They are in the card itself, so the AI follows them.
THE PACKAGE IS CHECKED BEFORE IT IS SUBMITTEDThe package is checked before it is submitted.
THE CHECKLIST IS THE FLOORThe checklist is the floor; the marketplace's current rules are the rule book.
NO PROMISE OF ACCEPTANCE OR TRUST LEVELNo promise of acceptance or trust level.
PAID AND FREE STAY WHERE THE PERSON PUT THEMPaid and free stay where the person put them.
VERIFY BY EXECUTIONVerify by execution, not by reasoning: run the machine and read what it prints before saying a thing is done.
SAY THE LIMIT OUT LOUD IN THE WORKSay the limit out loud in the work: every result names what it did not check.
NOTHING HIDDENNothing hidden: two readers, the person and the AI, see the same words.
THE PERSON DECIDESThe person decides.
What rides in the card.
In the card’s own voice, with a machine that shows its working.
THE GUIDEreferences/THE-FOLDER.md
THE MACHINElisting.py · two commandsbuild — build a marketplace folder from skills, then check it; check — check a marketplace folder; write LISTING.md. Every command prints its working and refuses a bad input; 12 checks in its selftest.
What it does once your AI has it.
build Build a marketplace folder from skills, then check it
check Check a marketplace folder; write LISTING.md
On the record a plugin marketplace built from this cut's own 18 packets — real material (not made up for the test). Built a marketplace folder (marketplace.json, plugin.json, the 18 skills, README with install lines, CHANGELOG) and checked it: PASS once the vendor review was put in evidence/. Nothing was submitted anywhere. Live on Claude Sonnet, 2026-10-13: 7 of 7 passed; the card fired on 3 of 3 trigger cases and on none of its hand-off cases.
What it will never do.
It will never promises acceptance; never submits for the person; never mixes paid skills into a free plugin.
It builds and checks the package. It does not submit anything, cannot read the marketplace's current rules for you, and cannot promise a trust level. It is an AI reading a text file: it can be wrong, so check what matters against your own records and the source.
What’s in the buy.
CARD.md — the whole card: its boot, laws, loop, when it says no, its seals, ledger, term and score · SKILL.md — the door your AI reads first · START-HERE.md — the first five minutes, for you
THE-FOLDER.md — the guide in references/, in the card's own voice
scripts/listing.py — the machine: build · check, standard library only, no network, selftest 12/12
WITNESS.md — the runs on real material and live on Claude, with what was not run · SELFTEST.md — the machine's own test, as run at the cut · MANIFEST.md, every file hashed · CHANGELOG.md
tests/evals.json + EVALS.md — the cases it must take, hand off and refuse
MY-LEDGER.md — the card's memory, on your own machine · TIN.md, the nine lines on the tin · LICENSE-NOTE.md
card.svg + card-machine.svg + card.json · card.html, the card as one offline file · doors/ — the rules files for Cursor, Codex, Gemini, Copilot and Claude Code, the system text for any other AI, a local-model file and an MCP door
PROOF · SELFTEST 12/12 · WITNESSED ON MATERIAL · LIVE ON CLAUDE SONNET 2026-10-13 · 7 OF 7 PASSED · EDITION 1 · PUNCH 91F420176BF49111F98AF3B2
ON EVERY DOOR · A CARD FOR YOUR AI, A FILE FOR YOUR COMPUTER
In Claude: turn on code execution under Settings › Capabilities, then Customize › Skills › + › Create skill, and upload the zip as it is — START-HERE.md in the box walks you through it, and tells you how to keep the ledger. In ChatGPT, Gemini and the rest: a Project, a GPT or a Gem with the card’s files attached and the short door in the box pasted as its instructions. The words run anywhere an AI reads Markdown; the machines run wherever the host runs Python. Witnessed in Claude only. The host marks →
Take it.
Nº 1197 PROPOSED — LAUNCHING SOON
Sold as is under the term printed. A card instructs an AI you operate; results depend on your model, your files and your judgement. Not medical, legal, tax or financial advice, never the person’s boss, and not a licence to practise. The terms →
One payment. The file is yours to keep and keeps working at its edition; new editions issued in the year after you buy reach you by email as replacement files. Tax is added at checkout where it applies. Nothing auto-renews.
A TERM, NOT A SUBSCRIPTION: NOTHING RENEWS ITSELF AND NOBODY IS CHARGED AGAIN. WHEN A TERM ENDS THE FILES STAY ON YOUR COMPUTER AND STAY READABLE — FREEZE, NOT LOSS.
THE MACHINE · IN THE OPEN · FROM THE CARD’S OWN WITNESS.MD
listing.py, every command showing its working.
A small Python program, standard library only. Your AI runs it; you can too. The blocks below are pasted from the card’s own WITNESS.md, as printed.
build
build a marketplace folder from skills, then check it
check
check a marketplace folder; write LISTING.md
selftest
12 checks that prove the machine; it must print 12/12
THE COMMANDS, IN ORDER, ON A PLUGIN MARKETPLACE BUILT FROM THIS CUT'S OWN 18 PACKETS
THE RUNS ARE PASTED FROM THE CARD’S OWN WITNESS.MD AS PRINTED. FIXTURES MARKED FICTIONAL ARE THE STUDIO’S OWN EXAMPLES, INVENTED FOR THE RECORD; NO PRIVATE PERSON IS NAMED.
QUESTIONS AT THE TABLE
Asked before the wire.
What does it need from me?
Finished skills, the owner's name and email, a version and a licence. Gather the facts, and it goes from there.
Does it send anything anywhere?
No. The machine is a standard-library Python program that runs on your own computer and sends nothing anywhere; the words run wherever an AI reads Markdown. No server, no account, no key.
What is on the record?
The self-test (12/12), a run on real or invented material with every command and verdict pasted into WITNESS.md as printed, and live runs on Claude Sonnet: 7 of 7 passed; the card fired on 3 of 3 trigger cases and on none of its hand-off cases.; the punch on the face is the SHA-256 of SKILL.md, so a downloaded copy can be checked against this room.
Can it be wrong?
Yes — it is an AI reading a text file. It builds and checks the package. It does not submit anything, cannot read the marketplace's current rules for you, and cannot promise a trust level.
What will it never do?
It will never promises acceptance; never submits for the person; never mixes paid skills into a free plugin.
